Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
File:                     Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json)
Hash identifier:          ZQG8bOCnBMmgyfToLdA19xSD6zNE2wBnnwAobL08EiI=
Subject key identifier:   30:96:67:C7:C7:11:78:FD:8E:DE:74:68:AC:7D:3E:E6:2A:FC:14:AC
Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Certificate issuer:       /CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Certificate serial:       019848C0295378634E419C0F657639517965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
Manifest number:          0581
Signing time:             Sat 26 Jul 2025 22:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:09 +0000
Files and hashes:         1: 41Kf3SCwnWPoeI3gwt6SuiM3U8E.roa (hash: u7Hgq9t6aNSvvpN1ap2hOUlss087XACBIUhudiFtYGg=)
                          2: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: R5bv3lFCbGt8Z5beC/cNdQ+grsYSCjqNM1yDiqy1ViE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:29:53:78:63:4e:41:9c:0f:65:76:39:51:79:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
        Validity
            Not Before: Jul 26 22:00:09 2025 GMT
            Not After : Jul 27 22:00:09 2025 GMT
        Subject: CN=309667c7c71178fd8ede7468ac7d3ee62afc14ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:0a:fc:8e:b6:63:a3:bc:3b:76:49:2c:0a:
                    5a:7f:c9:d3:28:fd:36:7d:b4:35:9c:28:d3:a8:45:
                    74:87:89:e4:79:79:52:dc:5c:78:10:51:31:40:46:
                    d5:ea:4b:97:18:e5:09:35:b1:74:d9:a9:57:1f:e7:
                    a8:e4:62:63:d7:67:52:49:ee:db:cf:50:10:bc:72:
                    f5:ce:fd:59:1e:93:66:fe:d1:09:6a:27:c6:60:e1:
                    ea:0a:ec:0f:44:5e:25:a2:34:47:9b:6b:d7:3c:b2:
                    e0:d4:51:3b:78:83:00:69:96:21:c6:55:86:f0:31:
                    07:ea:d5:c4:ab:55:13:27:23:c3:72:98:1a:18:27:
                    e9:f6:d7:9d:42:28:9e:2d:fb:d6:3e:cd:3a:51:91:
                    fd:fd:28:92:fa:dd:56:32:ce:06:f3:bb:32:04:67:
                    51:7a:dd:3c:41:76:94:b7:e3:81:43:fd:ed:b2:67:
                    7c:08:a0:f5:6f:92:25:e2:bf:43:fb:83:da:2f:e7:
                    d0:84:ac:cc:1d:f7:1a:57:b9:6b:4a:9d:72:dd:09:
                    ed:4b:b0:b6:c7:6e:19:e0:0d:45:7c:ff:e9:88:b6:
                    aa:a8:fc:06:e5:d5:00:95:1a:30:15:06:f4:65:ca:
                    25:ae:72:55:9d:65:60:31:94:c4:b8:ce:15:78:53:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:96:67:C7:C7:11:78:FD:8E:DE:74:68:AC:7D:3E:E6:2A:FC:14:AC
            X509v3 Authority Key Identifier:
                keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:87:a7:0f:e9:96:54:e7:c3:68:27:77:9c:3d:5e:3d:83:0e:
         ee:0d:2e:a0:af:08:02:1e:d1:c9:9f:28:eb:cb:49:b4:37:59:
         04:ff:86:cf:92:c8:a2:ff:de:f1:e6:0b:0c:e1:d4:b1:3d:a4:
         9d:42:21:b2:f5:79:40:a4:04:a8:27:c1:b5:04:8f:76:2d:39:
         7b:5d:d3:70:e6:03:ce:c0:df:80:7d:f8:ad:fc:1e:d4:77:e6:
         7e:88:7a:59:e9:a7:e4:00:41:dc:dd:df:53:b1:10:c6:f0:07:
         30:53:a0:ed:30:02:da:a5:4d:ee:f9:4e:48:c5:bf:4a:6b:6d:
         cf:ba:88:46:5d:9a:c4:bf:7a:3e:f5:4a:2f:ee:34:36:28:b5:
         7f:a2:cb:ae:9d:59:a8:d1:56:d5:7f:d1:d4:e3:e3:be:3b:a4:
         c9:e8:88:4f:07:74:34:54:c8:cd:4a:38:64:38:50:2a:d2:46:
         0b:8c:3d:7c:38:51:1e:10:41:18:4d:4d:37:08:65:97:c1:9a:
         9b:6e:fd:ef:fe:e3:e4:e9:55:f1:f7:73:b3:ed:0e:2d:8e:97:
         4f:f0:b8:5a:b4:53:dd:e2:2b:20:50:c8:28:e3:a1:45:2b:69:
         6b:14:30:91:6f:34:12:cd:c2:81:48:ae:d1:5b:29:34:18:29:
         ca:6c:ff:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwClTeGNOQZwPZXY5UXllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OGYwZTJiYTJkMDkzNDMzYTRiNjEyOTU3MjdiOTliYjE0
NWY3N2IwHhcNMjUwNzI2MjIwMDA5WhcNMjUwNzI3MjIwMDA5WjAzMTEwLwYDVQQD
EygzMDk2NjdjN2M3MTE3OGZkOGVkZTc0NjhhYzdkM2VlNjJhZmMxNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB0K/I62Y6O8O3ZJLApaf8nTKP02
fbQ1nCjTqEV0h4nkeXlS3Fx4EFExQEbV6kuXGOUJNbF02alXH+eo5GJj12dSSe7b
z1AQvHL1zv1ZHpNm/tEJaifGYOHqCuwPRF4lojRHm2vXPLLg1FE7eIMAaZYhxlWG
8DEH6tXEq1UTJyPDcpgaGCfp9tedQiieLfvWPs06UZH9/SiS+t1WMs4G87syBGdR
et08QXaUt+OBQ/3tsmd8CKD1b5Il4r9D+4PaL+fQhKzMHfcaV7lrSp1y3QntS7C2
x24Z4A1FfP/piLaqqPwG5dUAlRowFQb0ZcolrnJVnWVgMZTEuM4VeFO+zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCWZ8fHEXj9jt50aKx9PuYq/BSsMB8GA1UdIwQY
MBaAFBaPDiui0JNDOkthKVcnuZuxRfd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wODA4YjItMTYzMy00YzBkLWJjYmMt
ZjZmY2Y3M2NlZTcwLzEvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8wODA4YjItMTYzMy00YzBkLWJjYmMtZjZmY2Y3M2NlZTcw
LzEvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIenD+mW
VOfDaCd3nD1ePYMO7g0uoK8IAh7RyZ8o68tJtDdZBP+Gz5LIov/e8eYLDOHUsT2k
nUIhsvV5QKQEqCfBtQSPdi05e13TcOYDzsDfgH34rfwe1Hfmfoh6Wemn5ABB3N3f
U7EQxvAHMFOg7TAC2qVN7vlOSMW/Smttz7qIRl2axL96PvVKL+40Nii1f6LLrp1Z
qNFW1X/R1OPjvjukyeiITwd0NFTIzUo4ZDhQKtJGC4w9fDhRHhBBGE1NNwhll8Ga
m2797/7j5OlV8fdzs+0OLY6XT/C4WrRT3eIrIFDIKOOhRStpaxQwkW80Es3CgUiu
0VspNBgpymz/Nw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:34:25 2025 by rpki-client